This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json) Hash identifier: 3aORECD36w28Y7/tme8WXVRc0jFZzL9ymSYMhADAtFU= Subject key identifier: 37:75:5F:3C:7C:09:BB:69:1A:FA:AA:3E:B7:F1:39:A6:30:40:9C:FE Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft Manifest number: 067B Signing time: Sat 20 Dec 2025 21:51:14 +0000 Manifest this update: Sat 20 Dec 2025 21:51:13 +0000 Manifest next update: Sat 27 Dec 2025 21:51:13 +0000 Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: BAZppfWtEvQD1N0vKhxunmsAH8JD/yXYoGuA72VDdkU=) 2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: +tI56XBeGW4f/ZvoEb+YONcyvmeUooJFS+xtnAK+AuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Validity Not Before: Dec 20 21:51:13 2025 GMT Not After : Dec 27 21:51:13 2025 GMT Subject: CN=69471a52-7349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:a0:12:91:5b:a7:bb:fc:7d:8c:85:60:76: 6d:70:dc:f3:aa:87:12:bb:c0:c3:43:05:9f:34:b8: 77:f4:7a:32:77:a0:35:25:47:a6:f2:41:da:3c:51: cf:49:3f:ec:97:4f:ba:d7:6c:de:b8:12:17:22:5e: ae:ea:f2:24:6d:90:a7:72:a9:f4:9c:de:78:b4:a8: 40:40:b9:8a:80:2d:67:42:23:ed:7b:90:0c:98:35: 77:2d:d9:99:8b:4c:cd:c2:03:e6:c9:f5:12:9c:97: 9e:1c:56:dc:1d:bb:86:3f:5b:a4:27:f9:3d:16:96: de:6a:00:c1:36:9f:44:6f:18:e0:eb:74:9f:b4:84: 50:c9:66:d6:dc:29:c9:d7:9e:2d:a0:40:96:af:f3: c1:da:1d:85:04:60:5d:fc:d2:4b:5b:ff:5b:1f:1d: e5:9a:5f:d0:87:18:86:fa:ca:b3:3d:34:39:14:7b: f8:6b:2c:04:70:e1:db:46:de:04:e9:fa:22:42:15: f5:fd:2d:66:32:b0:03:37:f6:0a:ed:8c:ad:01:28: 74:31:22:2c:35:d5:b4:8e:0b:d0:f3:3c:80:4d:0b: c4:93:16:58:01:8c:e1:ea:e5:66:1f:61:be:10:7c: a1:09:60:0d:f6:8c:09:07:94:42:cb:b4:c2:ec:be: d0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:75:5F:3C:7C:09:BB:69:1A:FA:AA:3E:B7:F1:39:A6:30:40:9C:FE X509v3 Authority Key Identifier: keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:1e:b1:1a:b0:4f:0b:6a:67:12:6f:82:60:29:c1:60:bd:6c: e8:37:19:c6:17:45:3b:ad:76:07:9e:eb:70:09:56:12:a6:30: a0:dd:69:b5:b6:c3:79:b6:9e:43:3f:00:cc:92:61:56:2b:f9: d6:4f:3c:c6:e2:91:38:af:a8:d4:4f:86:9b:5e:be:4c:f4:48: 6e:47:27:d3:bd:c8:73:01:49:87:67:4f:be:ec:18:ff:f8:15: 12:f8:a8:b1:5d:99:a0:14:9e:e7:5d:e7:bc:63:60:0f:d9:ae: 15:d6:e6:6c:9b:ab:d5:c0:ec:ea:25:65:11:01:6d:65:39:ff: f6:5e:1d:7f:47:ce:ce:65:81:6c:59:0c:27:43:bc:4d:7e:8e: 25:9e:e5:10:fa:59:fd:9a:da:64:a5:1e:2f:3e:0e:e0:7a:26: 64:58:45:c2:7e:97:6c:29:97:a8:f3:e0:a7:9e:26:aa:88:a3: 28:c0:67:83:51:51:f3:8f:58:b8:cc:99:cb:25:5b:84:fc:0a: c4:5d:f6:32:e4:aa:93:2d:a9:b9:9c:1e:88:6e:66:82:8c:d9: 96:a0:1c:7f:79:1f:38:8e:14:e6:ee:4b:2a:bc:3e:c8:f2:75: 91:7b:2c:4a:27:0a:fd:3e:16:6f:4f:c4:df:58:24:94:a5:db: dd:cc:07:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMjgxMTAvBgNVBAUTKDgwOUVGRjFGNzgxOUI4MTc1MUYxNzdBQjVBRkVEODJC Q0MzMkE1NjkwHhcNMjUxMjIwMjE1MTEzWhcNMjUxMjI3MjE1MTEzWjAYMRYwFAYD VQQDDA02OTQ3MWE1Mi03MzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX6gEpFbp7v8fYyFYHZtcNzzqocSu8DDQwWfNLh39Hoyd6A1JUem8kHaPFHP ST/sl0+612zeuBIXIl6u6vIkbZCncqn0nN54tKhAQLmKgC1nQiPte5AMmDV3LdmZ i0zNwgPmyfUSnJeeHFbcHbuGP1ukJ/k9FpbeagDBNp9Ebxjg63SftIRQyWbW3CnJ 154toECWr/PB2h2FBGBd/NJLW/9bHx3lml/QhxiG+sqzPTQ5FHv4aywEcOHbRt4E 6foiQhX1/S1mMrADN/YK7YytASh0MSIsNdW0jgvQ8zyATQvEkxZYAYzh6uVmH2G+ EHyhCWAN9owJB5RCy7TC7L7QfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDd1Xzx8 CbtpGvqqPrfxOaYwQJz+MB8GA1UdIwQYMBaAFICe/x94GbgXUfF3q1r+2CvMMqVp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAyOC84QTRBREVFNEEx MUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVCZFI4WGVyV3Y3WUs4d3lw V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKN19IM2dadUJkUjhYZXJXdjdZSzh3eXBXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAyOC84QTRBREVFNEExMUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVC ZFI4WGVyV3Y3WUs4d3lwV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUHrEasE8LamcSb4JgKcFgvWzoNxnGF0U7rXYHnutwCVYSpjCg3Wm1 tsN5tp5DPwDMkmFWK/nWTzzG4pE4r6jUT4abXr5M9EhuRyfTvchzAUmHZ0++7Bj/ +BUS+KixXZmgFJ7nXee8Y2AP2a4V1uZsm6vVwOzqJWURAW1lOf/2Xh1/R87OZYFs WQwnQ7xNfo4lnuUQ+ln9mtpkpR4vPg7geiZkWEXCfpdsKZeo8+CnniaqiKMowGeD UVHzj1i4zJnLJVuE/ArEXfYy5KqTLam5nB6IbmaCjNmWoBx/eR84jhTm7ksqvD7I 8nWReyxKJwr9PhZvT8TfWCSUpdvdzAfH -----END CERTIFICATE-----Generated at Sun Dec 21 08:40:37 2025 by rpki-client